diff --git a/fail2ban/server/action.py b/fail2ban/server/action.py
index bfd2adc2..70b3eb7e 100644
--- a/fail2ban/server/action.py
+++ b/fail2ban/server/action.py
@@ -407,9 +407,11 @@ class CommandAction(ActionBase):
 					done.append(found_tag)
 					m = t.search(value, m.start())
 				#logSys.log(5, 'TAG: %s, newvalue: %s' % (tag, value))
-				# if was substituted, check again later:
+				# was substituted?
 				if tags[tag] != value:
-					repFlag = True
+					# check again later if embedded-recursive substitution:
+					if value.startswith('<') and value.endswith('>'):
+						repFlag = True
 					tags[tag] = value
 			if not repFlag:
 				break